Skip to content

AVideo has an Authorization Bypass via Path Traversal in HLS Endpoint Allows Streaming Private/Paid Videos

High severity GitHub Reviewed Published Mar 18, 2026 in WWBN/AVideo • Updated Mar 25, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts